Exploitation Summary
EIP tracks 2 public exploits for CVE-2022-31188. PoCs published by Emir Polat, emirpolatt.
AI-analyzed exploit summary This is a functional SSRF exploit for CVAT versions prior to 2.0.0, demonstrating how an attacker can force the server to make arbitrary HTTP requests via the `/api/v1/tasks/2/data` endpoint. The exploit uses a multipart/form-data request to inject a malicious URL into the `remote files[0]` parameter.
Description
CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery (SSRF) vulnerability. Validation has been added to urls used in the affected code path in version 2.0.0. Users are advised to upgrade. There are no known workarounds for this issue.
Exploits (2)
This is a functional SSRF exploit for CVAT versions prior to 2.0.0, demonstrating how an attacker can force the server to make arbitrary HTTP requests via the `/api/v1/tasks/2/data` endpoint. The exploit uses a multipart/form-data request to inject a malicious URL into the `remote files[0]` parameter.
This repository contains a proof-of-concept for CVE-2022-31188, an SSRF vulnerability in OpenCV CVAT. The exploit demonstrates how an authenticated user can send a malicious HTTP request to access other open ports on the system.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L